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FIG.4A 
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CREATE SECURE, AUTHENTICATED 
CONNECTION BETWEEN IAD 
AND RELIANT PARTY 


i 




IAD READS LDAP 
ADDRESS FROM CHIP CARD 


i 




IAD OFFERS ADDRESS TO 
RELIANT PARTY WHICH MAKES 
BIND ACCESS REQUEST 






RELIANT PARTY CREATES 
SECURE AUTHENTICATED 
CONNECTION TO CERT. LIBRARY 






RELIANT PARTY CREATES AN 
AUTHENTICATED SESSION WITH 
CERTIFICATE LIBRARY 






RELIANT PARTY MAKES REQUEST 
TO CERTIFICATE LIBRARY AND 
GETS RESPONSE 
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FIG.4B 
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CERTIFICATE LIBRARY 
RESPONDS TO THE 
RELIANT PARTY BIND REQUEST 
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RELIANT PARTY PRESENTS 
AUTHENTICATION CHALLENGE 
TO CARDHOLDER 




CARDHOLDER VERIFICATION 
(VERIFY THAT CARD BELONGS 
TO CARDHOLDER) 
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CHALLENGE DATA SIGNED AND 
RETURNED TO IAD 



420 



IAD FORWARDS THE SIGNED 
CHALLENGE 
TO THE RELIANT PARTY 




CHIP CARD BIND REQUEST; OPEN 
SECOND AUTHENTICATED BIND 
REQUEST WITH CERT. LIBRARY 
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FIG.4C 
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END 








CERTIFICATE LIBRARY 
RESPONDS TO THE 
RELIANT PARTY BIND REQUEST 






RELIANT PARTY PRESENTS 
AUTHENTICATION CHALLENGE 
TO CARDHOLDER 
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